1cg/htmx crsf docs.md

## htmx crsf docs.md

      
    Raw
  

              htmx crsf docs.md
            
          
    CRSF Handling

Handling CRSF in htmx is server-side platform dependent, but typically involves something like the following to
add a token to a header or parameter:
Vanilla JS

In pure javascript you can listen to the htmx:configRequest event and set the token there:
   document.body.addEventListener('htmx:configRequest', function(evt) {
      evt.detail.headers['X-CSRFToken'] = getToken();
    });
htmx JS api

Using the htmx javascript api, you can clean the above up a bit:
   htmx.on('htmx:configRequest', function(evt) {
      evt.detail.headers['X-CSRFToken'] = getToken();
    });
hyperscript

Finally, if you are using hyperscript, you can add the following to the body tag:
  <body _="on htmx:configRequest(headers) set headers['X-CSRFToken'] to getToken()">
     ...
  </body>
Platforms

Below are examples of setting the CSRT for various server side platforms.
Django

???